Incredimail Installer (This downloads the actual mail client).
http://www.incredimail.com/english/download.aspx?product=installer
File attached, password = infected
Detection DB 2957
Detected as Heur.Suspicious@77055031
[attachment deleted by admin]
haja
#2
Hi Ronny,
Thanks for reporting.We will check that and get back to you shortly.
Regards,
Haja
bequick
#3
My CIS doesn’t detect it.Heuristics high. Detection DB 2957
If i download this with FF i get an alert on the cache folder and if i save it to disk also.
AV = Stateful, Heur=low
bequick
#5
OK, it’s pretty weird.When i start the installer-nothing.When i quit it, CIS detects it. ???
http://img5.imageshack.us/img5/8792/screenshot1611200914344.th.png
Sounds creepy, what happens if you set to Statefull, Low, reboot and retry ?
Hi Ronny,
The false-positive was fixed with DB 2960. Thank you for reporting it!
Regards,
Ionel